Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/dNNwWWVP2yy7DD2m7SWQauQAwzg.roa
File: dNNwWWVP2yy7DD2m7SWQauQAwzg.roa (raw, json)
Hash identifier: MstKob/kdDZqyX6RWJFdAYkro5brgnjuHzUqwf+U8G0=
Subject key identifier: 74:D3:70:59:65:4F:DB:2C:BB:0C:3D:A6:ED:25:90:6A:E4:00:C3:38
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C6145A8A397E165F715AD750F6F23
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/dNNwWWVP2yy7DD2m7SWQauQAwzg.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209263
IP address blocks: 2a12:bec0:60::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:61:45:a8:a3:97:e1:65:f7:15:ad:75:0f:6f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74d37059654fdb2cbb0c3da6ed25906ae400c338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:69:2f:da:00:27:8c:96:d4:a6:fe:66:33:d1:
d8:b0:50:08:04:f8:74:ed:fd:cb:08:e7:e3:18:d3:
33:8c:7a:14:e3:dc:2d:50:12:d0:b0:31:81:63:98:
b1:f5:46:00:fa:e1:93:7c:0e:c2:ee:85:66:ab:fd:
0d:7b:b4:f6:e3:14:7c:39:2f:be:3f:c6:84:e1:db:
16:6c:36:90:5d:23:36:a3:3d:23:f5:e2:36:e5:27:
eb:46:19:c5:3c:98:fe:b1:60:ac:61:93:ba:bb:21:
74:23:71:7a:62:f0:c6:ea:ce:c7:d7:5f:f6:d9:5a:
87:81:43:d8:ab:36:67:57:55:29:9b:ea:02:f0:b1:
ca:a1:b9:e9:b7:a0:21:fc:72:c1:95:86:ea:16:b9:
f2:33:44:04:a0:5f:14:16:b3:d8:20:b0:c6:5e:c3:
66:f3:34:0d:35:76:71:c4:3c:cc:ea:42:e1:37:1f:
53:4c:02:42:29:7e:c6:d2:96:2b:71:bb:83:6a:1a:
0f:96:61:9b:67:4e:e5:57:c4:2a:35:ed:02:8d:f4:
99:4d:d2:06:5c:0a:f2:2c:72:fa:82:2a:64:a7:09:
fd:bf:b3:0c:8e:ba:da:80:bd:bc:ff:83:4d:c9:d6:
76:a7:17:73:84:c8:98:c9:69:8e:d1:37:1c:93:42:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D3:70:59:65:4F:DB:2C:BB:0C:3D:A6:ED:25:90:6A:E4:00:C3:38
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/dNNwWWVP2yy7DD2m7SWQauQAwzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:60::/48
Signature Algorithm: sha256WithRSAEncryption
ac:62:1c:33:c2:fe:b7:1b:9c:c1:ac:5d:ee:d2:7b:bf:a1:42:
fe:4d:83:c4:97:02:53:f3:cb:56:2e:df:57:4e:e0:86:7e:77:
8b:1f:69:0f:4b:b7:95:db:97:c6:95:95:5e:c6:ce:db:9a:cd:
e1:50:43:7f:7a:ab:1c:ea:4b:d7:89:b3:bb:98:bc:6c:e1:a9:
94:82:62:c3:3c:50:26:09:72:f5:18:97:26:2a:c4:64:bd:8d:
24:15:1b:41:0b:d4:1b:f9:7c:87:81:41:c1:d0:9f:9a:b1:6c:
d6:ff:15:e1:d1:ce:ee:55:ba:65:86:5c:80:13:4a:01:ce:ec:
41:4b:d8:72:b6:de:49:c1:d3:e8:3c:e5:35:c7:67:65:05:87:
40:c3:2b:64:41:63:f0:ef:96:b6:d7:e9:7a:2e:c2:83:73:1f:
76:92:aa:8f:0d:71:60:c0:78:31:79:b9:ec:48:ef:a3:b7:9b:
0b:08:5e:b9:a4:09:a5:7d:85:cd:d7:96:ab:c5:94:83:dc:1c:
c9:1a:5f:06:62:6c:69:8a:db:8f:e1:df:7b:10:af:ba:79:ab:
78:37:b9:b4:02:55:b3:5c:d3:0f:e2:56:4c:03:7c:e7:34:1e:
de:92:ef:ec:4e:82:ef:32:b4:0d:54:bf:86:5e:c4:f7:03:52:
39:79:c7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:53:06 2025 by rpki-client